Partitioned platform security mechanism

ABSTRACT

A computer platform is disclosed. The computer platform comprises a central processing unit (CPU) including at least one socket having a plurality of tiles and control circuitry to partition the socket into a plurality of sub-sockets and assign a unique identity to each of the plurality of sub-sockets for security verification, wherein each sub-socket comprises at least one of the plurality of tiles to operate as a cluster of resources.

BACKGROUND OF THE DESCRIPTION

A system on chip (SOC) is an integrated circuit that integrates allcomponents of a computer or other electronic system. These componentsinclude a central processing unit (CPU), memory, input/output (IO) portsand secondary storage, which are all included on a single substrate ormicrochip.

BRIEF DESCRIPTION OF THE DRAWINGS

So that the manner in which the above recited features of the presentembodiment can be understood in detail, a more particular description ofthe embodiment, briefly summarized above, may be had by reference toembodiments, some of which are illustrated in the appended drawings. Itis to be noted, however, that the appended drawings illustrate onlytypical embodiments of this embodiment and are therefore not to beconsidered limiting of its scope, for the embodiment may admit to otherequally effective embodiments.

FIG. 1 illustrates one embodiment of a computing device.

FIG. 2 illustrates one embodiment of a platform.

FIG. 3 illustrates one embodiment of a CPU socket.

FIGS. 4A and 4B illustrate another embodiment of a CPU socket.

FIG. 5 illustrates one embodiment of a certificate authority.

FIG. 6 is a flow diagram illustrating one embodiment of a process forestablishing a partitioned root of trust.

FIG. 7 illustrates one embodiment of a schematic diagram of anillustrative electronic computing device.

DETAILED DESCRIPTION

In the following description, numerous specific details are set forth toprovide a more thorough understanding of the present embodiment.However, it will be apparent to one of skill in the art that the presentembodiment may be practiced without one or more of these specificdetails. In other instances, well-known features have not been describedin order to avoid obscuring the present embodiment.

In embodiments, a mechanism is provided to facilitate identificationverification of independent virtual clusters operating on a singlephysical CPU.

References to “one embodiment”, “an embodiment”, “example embodiment”,“various embodiments”, etc., indicate that the embodiment(s) sodescribed may include particular features, structures, orcharacteristics, but not every embodiment necessarily includes theparticular features, structures, or characteristics. Further, someembodiments may have some, all, or none of the features described forother embodiments.

In the following description and claims, the term “coupled” along withits derivatives, may be used. “Coupled” is used to indicate that two ormore elements cooperate or interact with each other, but they may or maynot have intervening physical or electrical components between them.

As used in the claims, unless otherwise specified, the use of theordinal adjectives “first”, “second”, “third”, etc., to describe acommon element, merely indicate that different instances of likeelements are being referred to and are not intended to imply that theelements so described must be in a given sequence, either temporally,spatially, in ranking, or in any other manner.

FIG. 1 illustrates one embodiment of a computing device 100. Accordingto one embodiment, computing device 100 comprises a computer platformhosting an integrated circuit (“IC”), such as a system on a chip (“SoC”or “SOC”), integrating various hardware and/or software components ofcomputing device 100 on a single chip. As illustrated, in oneembodiment, computing device 100 may include any number and type ofhardware and/or software components, such as (without limitation)graphics processing unit 114 (“GPU” or simply “graphics processor”),graphics driver 116 (also referred to as “GPU driver”, “graphics driverlogic”, “driver logic”, user-mode driver (UMD), UMD, user-mode driverframework (UMDF), UMDF, or simply “driver”), central processing unit 112(“CPU” or simply “application processor”), memory 108, network devices,drivers, or the like, as well as input/output (I/O) sources 104, such astouchscreens, touch panels, touch pads, virtual or regular keyboards,virtual or regular mice, ports, connectors, etc. Computing device 100may include operating system (OS) 106 serving as an interface betweenhardware and/or physical resources of computing device 100 and a user.

It is to be appreciated that a lesser or more equipped system than theexample described above may be preferred for certain implementations.Therefore, the configuration of computing device 100 may vary fromimplementation to implementation depending upon numerous factors, suchas price constraints, performance requirements, technologicalimprovements, or other circumstances.

Embodiments may be implemented as any or a combination of: one or moremicrochips or integrated circuits interconnected using a parentboard,hardwired logic, software stored by a memory device and executed by amicroprocessor, firmware, an application specific integrated circuit(ASIC), and/or a field programmable gate array (FPGA). The terms“logic”, “module”, “component”, “engine”, and “mechanism” may include,by way of example, software or hardware and/or a combination thereof,such as firmware.

Embodiments may be implemented using one or more memory chips,controllers, CPUs (Central Processing Unit), microchips or integratedcircuits interconnected using a motherboard, an application specificintegrated circuit (ASIC), and/or a field programmable gate array(FPGA). The term “logic” may include, by way of example, software orhardware and/or combinations of software and hardware.

FIG. 2 illustrates one embodiment of a platform 200 including a SOC 210similar to computing device 100 discussed above. As shown in FIG. 2 ,SOC 210 includes other computing device components (e.g., memory 108 andCPU 112) coupled via a system fabric 205. In one embodiment, systemfabric 205 comprises an integrated on-chip system fabric (IOSF) toprovide a standardized on-die interconnect protocol for couplinginterconnect protocol (IP) agents 230 (e.g., IP agents 230A and 230B)within SOC 210. In such an embodiment, the interconnect protocolprovides a standardized interface to enable third parties to designlogic such as IP agents to be incorporated in SOC 210.

According to embodiment, IP agents 230 may include general purposeprocessors (e.g., in-order or out-of-order cores), fixed function units,graphics processors, I/O controllers, display controllers, etc. In suchan embodiment, each IP agent 230 includes a hardware interface 235(e.g., 235A and 235B) to provide standardization to enable the IP agent230 to communicate with SOC 210 components. For example, in anembodiment in which IP agent 230 is a third-party visual processing unit(VPU), interface 235 provides a standardization to enable the VPU toaccess memory 108 via fabric 205.

Further, SOC 210 is coupled to a non-volatile memory 250. Non-volatilememory 250 may be implemented as a Peripheral Component InterconnectExpress (PCIe) storage drive, such as a solid-state drive (SSD) orNon-Volatile Memory Express (NVMe) drives. In one embodiment,non-volatile memory 250 is implemented to store the platform 200firmware 255. In one embodiment, SOC 210 is coupled to non-volatilememory 250 via a serial peripheral interface (SPI) 201. In such anembodiment, SOC 210 includes SPI controller 260 coupled between SPI 201and system fabric 205. In a further embodiment, SPI controller 260 is aflash controller implemented to control access to non-volatile memory250 via SPI 201.

SOC 210 also includes a security engine 240 that performs varioussecurity operations (e.g., security processing, cryptographic functions,etc.) for SOC 210. In one embodiment, security engine 240 comprises anIP agent 230 that is implemented to perform the security operations. Inone embodiment, security engine 240 operates as a root of trust (orplatform ROT) to assure the integrity of hardware and software operatingon platform 200.

FIG. 3 illustrates one embodiment of a CPU socket 350. As shown in FIG.3 , CPU socket 350 includes having CPU cores (or tiles) 352, in whichtiles 352A and 352B are assigned to a cluster 0 and tiles 352C and 352Dare assigned to a cluster 1. In one embodiment, each cluster operates asan independent CPU socket that may execute independent OSs. In such anembodiment, a single CPU 350 may be partitioned such that a singlephysical CPU and its resources may be partitioned into “independent”sub-sockets based on workload distribution requirements.

Typically, the integrity of a physical socket must be established priorto operation. Thus, a socket must provide its identity and measurementsto a platform ROT (e.g., a platform security engine). However, theplatform ROT typically requires a device identity to be independentlyestablished for each cluster in instances in which a physical socket ispartitioned into multiple sub-sockets. The problem is that there is onlya single identity associated with the physical CPU.

According to one embodiment, CPU 350 and its chain of trust isprovisioned (e.g., by the manufacturer) with a single physical deviceidentity that is used as a “Root” active component root of trust (orAC-ROT Root) by a platform ROT (e.g., security engine 240) toauthenticate CPU 350 in order to maintain platform integrity. In afurther embodiment, an AC-ROT associated with each sub-socketcommunicates with the platform ROT when a physical CPU has beendynamically partitioned into multiple sub-sockets.

In such an embodiment, an AC-ROT associated with a sub-socket comprisesa “Leaf” AC-ROT (or AC-ROT Leaf) that uses AC-ROT Root as an on-diecertificate authority (OD-CA). Thus, a certificate chain derived foreach AC-ROT associated with a sub-socket provides a unique identity foreach AC-ROT Leaf since the Root is manufacturer certified. As usedherein, a certificate authority is an entity that issues digitalcertificates that certify the ownership of a public key by a namedsubject of the certificate, which allows others (e.g., relying parties)to rely upon signatures or on assertions made about the private key thatcorresponds to the certified public key.

FIGS. 4A and 4B illustrate another embodiment of a CPU 350. FIG. 4Aillustrates CPU socket 350 prior to dynamic partitioning, while FIG. 4Billustrates CPU socket 350 after being partitioned into multiplesub-sockets. In one embodiment, each sub-socket is configured as acluster of resources. As shown in FIG. 4B, a first sub-socket isconfigured as cluster 0 each that includes I/O 340A andcompute/accelerator resources 410A, while a second sub-socket isconfigured as cluster 1 each that includes I/O 340B andcompute/accelerator resources 410B. In a further embodiment,compute/accelerator resources 410 may represent tiles 352 shown in FIG.3 .

CPU 350 also includes control unit 450 that is implemented to direct theoperation of CPU 350. According to one embodiment, control unit 450 isimplemented is configured to perform the dynamic partitioning of CPUsocket 350 into multiple sub-sockets. In a further embodiment, controlunit 450 assigns a unique identity to each of the multiple sub-sockets.In such an embodiment, control unit 450 assigns AC-ROT Root to one ofthe partitioned sub-sockets and generates an AC-ROT Leaf for each of theremaining sub-sockets. As used herein, dynamic partitioning is definedas an automatic combination and division of sub-sockets based on CPUworkloads in which multiple sub-partitions may be combined while anothersub-socket partition is fully active executing a workload. Althoughshown as a two sub-socket implementation, other embodiments mayimplement different quantities of sub-sockets.

FIG. 4B, shows cluster 0 as implementing an AC-ROT Leaf0, while cluster1 comprises an AC-ROT Leaf1. In one embodiment, a Root is defined as anAC-ROT registered by a manufacturer as an authentic via a certificationprocess, while a Leaf as the AC-ROT that does not have a directlyallocated identity. In such an embodiment, control unit 450 uses theAC-ROT Root to generate an AC-ROT Leaf for each of the sub-sockets.

In a further embodiment, AC-ROT Leaf receives a device identifier (orDevice ID) public key signed by the AC-ROT Root. As discussed above,AC-ROT Root operates as a certificate of authority. Thus, the resultingcertificate chain thereby carries the identity of the manufacturerembedded in the Root AC-ROT. In yet a further embodiment, the platformROT may independently verify the identify and measurements provided bymultiple AC-ROTs as if each were separate physical sockets.

FIG. 5 illustrates one embodiment of a certificate authority view of anAC-ROT Root. As shown in FIG. 5 , AC-ROT Root operates as an on-diecertificate authority to generate a certificate chain associated with anAC-ROT Leaf. In one embodiment, the certificate chain associated with anAC-ROT Leaf includes the Leaf identity (e.g., LEAF 1), an indicationthat the identified leaf has been cryptographically signed by the AC-ROTRoot (e.g., LEAF 0 signed by “Root”) and the on-device device signatureauthority associated with the CPU manufacturer (e.g., IDENTITY).

FIG. 6 is a flow diagram illustrating one embodiment of a process forestablishing a root of trust for sub-sockets of a partitioned CPUsocket. At processing block 610, partitioning of the CPU socket isdetected. As discussed above, the CPU socket may be dynamicallypartitioned into multiple sub-sockets based on CPU workloads. Asmentioned above, each sub-socket operates as its own virtual cluster ofresources that is used to execute separate workloads. At processingblock 620, an AC-ROT Leaf is generated for each of the multiplesub-sockets for security verification. As discussed above, an AC-ROTLeaf is generated from a certificate chain using AC-ROT Root as acertificate authority. At processing block 630, each AC-ROT Leafcommunicates with the platform ROT (e.g., security engine 240) foridentity verification. As discussed above, the platform ROTindependently verifies the identify and measurements provided by theAC-ROT Leafs as if each were separate physical sockets.

FIG. 7 is a schematic diagram of an illustrative electronic computingdevice to enable enhanced protection against adversarial attacksaccording to some embodiments. In some embodiments, the computing device700 includes one or more processors 710 including one or more processorscores 718 and a TEE 764, the TEE including a machine learning serviceenclave (MLSE) 780. In some embodiments, the computing device 700includes a hardware accelerator 768, the hardware accelerator includinga cryptographic engine 782 and a machine learning model 784. In someembodiments, the computing device is to provide enhanced protectionsagainst ML adversarial attacks, as provided in FIGS. 1-6 .

The computing device 700 may additionally include one or more of thefollowing: cache 762, a graphical processing unit (GPU) 712 (which maybe the hardware accelerator in some implementations), a wirelessinput/output (I/O) interface 720, a wired I/O interface 730, memorycircuitry 740, power management circuitry 750, non-transitory storagedevice 760, and a network interface 770 for connection to a network 772.The following discussion provides a brief, general description of thecomponents forming the illustrative computing device 700. Example,non-limiting computing devices 700 may include a desktop computingdevice, blade server device, workstation, or similar device or system.

In embodiments, the processor cores 718 are capable of executingmachine-readable instruction sets 714, reading data and/or instructionsets 714 from one or more storage devices 760 and writing data to theone or more storage devices 760. Those skilled in the relevant art willappreciate that the illustrated embodiments as well as other embodimentsmay be practiced with other processor-based device configurations,including portable electronic or handheld electronic devices, forinstance smartphones, portable computers, wearable computers, consumerelectronics, personal computers (“PCs”), network PCs, minicomputers,server blades, mainframe computers, and the like.

The processor cores 718 may include any number of hardwired orconfigurable circuits, some or all of which may include programmableand/or configurable combinations of electronic components, semiconductordevices, and/or logic elements that are disposed partially or wholly ina PC, server, or other computing system capable of executingprocessor-readable instructions.

The computing device 700 includes a bus or similar communications link716 that communicably couples and facilitates the exchange ofinformation and/or data between various system components including theprocessor cores 718, the cache 762, the graphics processor circuitry712, one or more wireless I/O interfaces 720, one or more wired I/Ointerfaces 730, one or more storage devices 760, and/or one or morenetwork interfaces 770. The computing device 700 may be referred to inthe singular herein, but this is not intended to limit the embodimentsto a single computing device 700, since in certain embodiments, theremay be more than one computing device 700 that incorporates, includes,or contains any number of communicably coupled, collocated, or remotenetworked circuits or devices.

The processor cores 718 may include any number, type, or combination ofcurrently available or future developed devices capable of executingmachine-readable instruction sets.

The processor cores 718 may include (or be coupled to) but are notlimited to any current or future developed single- or multi-coreprocessor or microprocessor, such as: on or more systems on a chip(SOCs); central processing units (CPUs); digital signal processors(DSPs); graphics processing units (GPUs); application-specificintegrated circuits (ASICs), programmable logic units, fieldprogrammable gate arrays (FPGAs), and the like. Unless describedotherwise, the construction and operation of the various blocks shown inFIG. 7 are of conventional design. Consequently, such blocks need not bedescribed in further detail herein, as they will be understood by thoseskilled in the relevant art. The bus 716 that interconnects at leastsome of the components of the computing device 700 may employ anycurrently available or future developed serial or parallel busstructures or architectures.

The system memory 740 may include read-only memory (“ROM”) 742 andrandom-access memory (“RAM”) 746. A portion of the ROM 742 may be usedto store or otherwise retain a basic input/output system (“BIOS”) 744.The BIOS 744 provides basic functionality to the computing device 700,for example by causing the processor cores 718 to load and/or executeone or more machine-readable instruction sets 714. In embodiments, atleast some of the one or more machine-readable instruction sets 714cause at least a portion of the processor cores 718 to provide, create,produce, transition, and/or function as a dedicated, specific, andparticular machine, for example a word processing machine, a digitalimage acquisition machine, a media playing machine, a gaming system, acommunications device, a smartphone, or similar.

The computing device 700 may include at least one wireless input/output(I/O) interface 720. The at least one wireless I/O interface 720 may becommunicably coupled to one or more physical output devices 722 (tactiledevices, video displays, audio output devices, hardcopy output devices,etc.). The at least one wireless I/O interface 720 may communicablycouple to one or more physical input devices 724 (pointing devices,touchscreens, keyboards, tactile devices, etc.). The at least onewireless I/O interface 720 may include any currently available or futuredeveloped wireless I/O interface. Example wireless I/O interfacesinclude, but are not limited to: BLUETOOTH®, near field communication(NFC), and similar.

The computing device 700 may include one or more wired input/output(I/O) interfaces 730. The at least one wired I/O interface 730 may becommunicably coupled to one or more physical output devices 722 (tactiledevices, video displays, audio output devices, hardcopy output devices,etc.). The at least one wired I/O interface 730 may be communicablycoupled to one or more physical input devices 724 (pointing devices,touchscreens, keyboards, tactile devices, etc.). The wired I/O interface730 may include any currently available or future developed I/Ointerface. Example wired I/O interfaces include but are not limited to:universal serial bus (USB), IEEE 1394 (“FireWire”), and similar.

The computing device 700 may include one or more communicably coupled,non-transitory, data storage devices 760. The data storage devices 760may include one or more hard disk drives (HDDs) and/or one or moresolid-state storage devices (SSDs). The one or more data storage devices760 may include any current or future developed storage appliances,network storage devices, and/or systems. Non-limiting examples of suchdata storage devices 760 may include, but are not limited to, anycurrent or future developed non-transitory storage appliances ordevices, such as one or more magnetic storage devices, one or moreoptical storage devices, one or more electro-resistive storage devices,one or more molecular storage devices, one or more quantum storagedevices, or various combinations thereof. In some implementations, theone or more data storage devices 760 may include one or more removablestorage devices, such as one or more flash drives, flash memories, flashstorage units, or similar appliances or devices capable of communicablecoupling to and decoupling from the computing device 700.

The one or more data storage devices 760 may include interfaces orcontrollers (not shown) communicatively coupling the respective storagedevice or system to the bus 716. The one or more data storage devices760 may store, retain, or otherwise contain machine-readable instructionsets, data structures, program modules, data stores, databases, logicalstructures, and/or other data useful to the processor cores 718 and/orgraphics processor circuitry 712 and/or one or more applicationsexecuted on or by the processor cores 718 and/or graphics processorcircuitry 712. In some instances, one or more data storage devices 760may be communicably coupled to the processor cores 718, for example viathe bus 716 or via one or more wired communications interfaces 730(e.g., Universal Serial Bus or USB); one or more wireless communicationsinterfaces 720 (e.g., Bluetooth®, Near Field Communication or NFC);and/or one or more network interfaces 770 (IEEE 802.3 or Ethernet, IEEE802.11, or Wi-Fi®, etc.).

Processor-readable instruction sets 714 and other programs,applications, logic sets, and/or modules may be stored in whole or inpart in the system memory 740. Such instruction sets 714 may betransferred, in whole or in part, from the one or more data storagedevices 760. The instruction sets 714 may be loaded, stored, orotherwise retained in system memory 740, in whole or in part, duringexecution by the processor cores 718 and/or graphics processor circuitry712.

The computing device 700 may include power management circuitry 750 thatcontrols one or more operational aspects of the energy storage device752. In embodiments, the energy storage device 752 may include one ormore primary (i.e., non-rechargeable) or secondary (i.e., rechargeable)batteries or similar energy storage devices. In embodiments, the energystorage device 752 may include one or more supercapacitors orultracapacitors. In embodiments, the power management circuitry 750 mayalter, adjust, or control the flow of energy from an external powersource 754 to the energy storage device 752 and/or to the computingdevice 700. The power source 754 may include, but is not limited to, asolar power system, a commercial electric grid, a portable generator, anexternal energy storage device, or any combination thereof.

For convenience, the processor cores 718, the graphics processorcircuitry 712, the wireless I/O interface 720, the wired I/O interface730, the storage device 760, and the network interface 770 areillustrated as communicatively coupled to each other via the bus 716,thereby providing connectivity between the above-described components.In alternative embodiments, the above-described components may becommunicatively coupled in a different manner than illustrated in FIG. 7. For example, one or more of the above-described components may bedirectly coupled to other components, or may be coupled to each other,via one or more intermediary components (not shown). In another example,one or more of the above-described components may be integrated into theprocessor cores 718 and/or the graphics processor circuitry 712. In someembodiments, all or a portion of the bus 716 may be omitted and thecomponents are coupled directly to each other using suitable wired orwireless connections.

Embodiments may be provided, for example, as a computer program productwhich may include one or more transitory or non-transitorymachine-readable storage media having stored thereon machine-executableinstructions that, when executed by one or more machines such as acomputer, network of computers, or other electronic devices, may resultin the one or more machines carrying out operations in accordance withembodiments described herein. A machine-readable medium may include, butis not limited to, floppy diskettes, optical disks, CD-ROMs (CompactDisc-Read Only Memories), and magneto-optical disks, ROMs, RAMs, EPROMs(Erasable Programmable Read Only Memories), EEPROMs (ElectricallyErasable Programmable Read Only Memories), magnetic or optical cards,flash memory, or other type of media/machine-readable medium suitablefor storing machine-executable instructions.

Some embodiments pertain to Example 1 that includes a computer platformcomprising a central processing unit (CPU) including at least one sockethaving a plurality of tiles and control circuitry to partition thesocket into a plurality of sub-sockets and assign a unique identity toeach of the plurality of sub-sockets for security verification, whereineach sub-socket comprises at least one of the plurality of tiles tooperate as a cluster of resources.

Example 2 includes the subject matter of Example 1, wherein assigningthe unique identity to each of the plurality of sub-sockets comprisesgenerating a first active component root of trust (AC-ROT) Leafassociated with a first of the plurality of sub-sockets and generating asecond active component AC-ROT Leaf associated with a second of theplurality of sub-sockets.

Example 3 includes the subject matter of Examples 1 and 2, wherein thefirst AC-ROT Leaf and the second AC-ROT Leaf are generated using anAC-ROT Root.

Example 4 includes the subject matter of Examples 1-3, wherein theAC-ROT Root comprises the CPU AC-ROT.

Example 5 includes the subject matter of Examples 1-4, wherein theAC-ROT Root operates as a certificate of authority to generate a firstcertificate chain associated with the first AC-ROT Leaf and a secondcertificate chain associated with the second AC-ROT Leaf.

Example 6 includes the subject matter of Examples 1-5, wherein thecertificate chain comprises a leaf identity, an indication that theidentified leaf has been cryptographically signed by the AC-ROT Root andan on-device device signature authority associated with a manufacturerof the CPU.

Example 7 includes the subject matter of Examples 1-6, wherein theAC-ROT Leaf receives a device identifier public key signed by the AC-ROTRoot.

Example 8 includes the subject matter of Examples 1-7, wherein theplatform further comprises a security engine to operate is a root oftrust for the platform.

Example 9 includes the subject matter of Examples 1-8, wherein thesecurity engine verifies the identity of the first sub-socket via thefirst AC-ROT Leaf and verifies the identity of the second sub-socket viathe second AC-ROT Leaf.

Some embodiments pertain to Example 10 that includes a method comprisingdetecting a partitioning of a central processing unit (CPU) sockethaving a plurality of tiles into plurality of plurality of sub-socketsand assigning a unique identity to each of the plurality of sub-socketsfor security verification, wherein each sub-socket comprises at leastone of the plurality of tiles to operate as a cluster of resources.

Example 11 includes the subject matter of Example 10, wherein assigningthe unique identity to each of the plurality of sub-sockets comprisesgenerating a first active component root of trust (AC-ROT) Leafassociated with a first of the plurality of sub-sockets and generating asecond active component AC-ROT Leaf associated with a second of theplurality of sub-sockets.

Example 12 includes the subject matter of Examples 10 and 11, whereinthe first AC-ROT Leaf and the second AC-ROT Leaf are generated using anAC-ROT Root.

Example 13 includes the subject matter of Examples 10-12, wherein theAC-ROT Root comprises a CPU AC-ROT associated with the CPU.

Example 14 includes the subject matter of Examples 10-13, wherein theAC-ROT Root operates as a certificate of authority to generate a firstcertificate chain associated with the first AC-ROT Leaf and a secondcertificate chain associated with the second AC-ROT Leaf.

Example 15 includes the subject matter of Examples 10-14, furthercomprising verifying the identity of the first sub-socket via the firstAC-ROT Leaf at a platform root of trust and verifying the identity ofthe second sub-socket via the second AC-ROT Leaf at the platform root oftrust.

Some embodiments pertain to Example 16 that includes a system on chip(SOC) comprising a central processing unit (CPU) including at least onesocket having a plurality of tiles and control circuitry to partitionthe socket into a plurality of sub-sockets and assign a unique identityto each of the plurality of sub-sockets for security verification,wherein each sub-socket comprises at least one of the plurality of tilesto operate as a cluster of resources and a security engine to verify theidentity of the plurality of sub-sockets.

Example 17 includes the subject matter of Example 16, wherein assigningthe unique identity to each of the plurality of sub-sockets comprisesgenerating a first active component root of trust (AC-ROT) Leafassociated with a first of the plurality of sub-sockets and generating asecond active component AC-ROT Leaf associated with a second of theplurality of sub-sockets.

Example 18 includes the subject matter of Examples 16 and 17, whereinthe first AC-ROT Leaf and the second AC-ROT Leaf are generated using anAC-ROT Root.

Example 19 includes the subject matter of Examples 16-18, wherein theAC-ROT Root operates as a certificate of authority to generate a firstcertificate chain associated with the first AC-ROT Leaf and a secondcertificate chain associated with the second AC-ROT Leaf.

Example 20 includes the subject matter of Examples 16-19, wherein thesecurity engine verifies the identity of the first sub-socket via thefirst AC-ROT Leaf and verifies the identity of the second sub-socket viathe second AC-ROT Leaf.

The embodiment has been described above with reference to specificembodiments. Persons skilled in the art, however, will understand thatvarious modifications and changes may be made thereto without departingfrom the broader spirit and scope of the embodiment as set forth in theappended claims. The foregoing description and drawings are,accordingly, to be regarded in an illustrative rather than a restrictivesense.

What is claimed is:
 1. A computer platform comprising: a centralprocessing unit (CPU) including: at least one socket having a pluralityof tiles; and control circuitry to partition the socket into a pluralityof sub-sockets and assign a unique identity to each of the plurality ofsub-sockets for security verification, wherein each sub-socket comprisesat least one of the plurality of tiles to operate as a cluster ofresources.
 2. The computer platform of claim 1, wherein assigning theunique identity to each of the plurality of sub-sockets comprisesgenerating a first active component root of trust (AC-ROT) Leafassociated with a first of the plurality of sub-sockets and generating asecond active component AC-ROT Leaf associated with a second of theplurality of sub-sockets.
 3. The computer platform of claim 2, whereinthe first AC-ROT Leaf and the second AC-ROT Leaf are generated using anAC-ROT Root.
 4. The computer platform of claim 3, wherein the AC-ROTRoot comprises an AC-ROT associated with the CPU.
 5. The computerplatform of claim 4, wherein the AC-ROT Root operates as a certificateof authority to generate a first certificate chain associated with thefirst AC-ROT Leaf and a second certificate chain associated with thesecond AC-ROT Leaf.
 6. The computer platform of claim 5, wherein thecertificate chain comprises a leaf identity, an indication that anidentified Leaf has been cryptographically signed by the AC-ROT Root andan on-device device signature authority associated with a manufacturerof the CPU.
 7. The computer platform of claim 6, wherein the AC-ROT Leafreceives a device identifier public key signed by the AC-ROT Root. 8.The computer platform of claim 7, wherein the platform further comprisesa security engine to operate is a root of trust for the platform.
 9. Thecomputer platform of claim 8, wherein the security engine verifies theidentity of the first sub-socket via the first AC-ROT Leaf and verifiesthe identity of the second sub-socket via the second AC-ROT Leaf.
 10. Amethod comprising: detecting a partitioning of a central processing unit(CPU) socket having a plurality of tiles into plurality of plurality ofsub-sockets; and assigning a unique identity to each of the plurality ofsub-sockets for security verification, wherein each sub-socket comprisesat least one of the plurality of tiles to operate as a cluster ofresources.
 11. The method of claim 10, wherein assigning the uniqueidentity to each of the plurality of sub-sockets comprises: generating afirst active component root of trust (AC-ROT) Leaf associated with afirst of the plurality of sub-sockets; and generating a second activecomponent AC-ROT Leaf associated with a second of the plurality ofsub-sockets.
 12. The method of claim 11, wherein the first AC-ROT Leafand the second AC-ROT Leaf are generated using an AC-ROT Root.
 13. Themethod of claim 12, wherein the AC-ROT Root comprises a CPU AC-ROTassociated with the CPU.
 14. The method of claim 13, wherein the AC-ROTRoot operates as a certificate of authority to generate a firstcertificate chain associated with the first AC-ROT Leaf and a secondcertificate chain associated with the second AC-ROT Leaf.
 15. The methodof claim 13, further comprising: verifying the identity of the firstsub-socket via the first AC-ROT Leaf at a platform root of trust; andverifying the identity of the second sub-socket via the second AC-ROTLeaf at the platform root of trust.
 16. A system on chip (SOC)comprising: a central processing unit (CPU) including: at least onesocket having a plurality of tiles; and control circuitry to partitionthe socket into a plurality of sub-sockets and assign a unique identityto each of the plurality of sub-sockets for security verification,wherein each sub-socket comprises at least one of the plurality of tilesto operate as a cluster of resources; and a security engine to verifythe identity of the plurality of sub-sockets.
 17. The SOC of claim 16,wherein assigning the unique identity to each of the plurality ofsub-sockets comprises generating a first active component root of trust(AC-ROT) Leaf associated with a first of the plurality of sub-socketsand generating a second active component AC-ROT Leaf associated with asecond of the plurality of sub-sockets.
 18. The SOC of claim 17, whereinthe first AC-ROT Leaf and the second AC-ROT Leaf are generated using anAC-ROT Root.
 19. The SOC of claim 18, wherein the AC-ROT Root operatesas a certificate of authority to generate a first certificate chainassociated with the first AC-ROT Leaf and a second certificate chainassociated with the second AC-ROT Leaf.
 20. The SOC of claim 19, whereinthe security engine verifies the identity of the first sub-socket viathe first AC-ROT Leaf and verifies the identity of the second sub-socketvia the second AC-ROT Leaf.